2
$\begingroup$

While reading on block ciphers and DES I read that two-round Feistel network is not a secure PRP? Is there any easy to understand proof to explain the intuition behind this statement. I did search around and also reviewed this question but wasn't really able to understand why it isn't secure PRP. Any help would be much appreciated!

$\endgroup$
3
6
$\begingroup$

I read that two-round Feistel network is not a secure PRP

That's easily seen:

                                    two-rounds Feistel cipher

It holds $P_L\oplus C_L=F_0(P_R)$. That implies a distinguishable property: for any fixed $P_R$ and whatever the round function $F_0$, when we flip bit(s) in $P_L$, that flips the corresponding bit(s) in $C_L$ and leaves the other bit(s) in $C_L$ unchanged.

That property allows a break under Chosen Plaintext Attack.

$\endgroup$
1
  • $\begingroup$ Perfect simple explanation that I was looking for! Thanks a lot! $\endgroup$ – Alex Oct 25 '20 at 20:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.